Thursday, January 1, 2015

About the recent claims of viruses in devcppPortable.exe

Recently, a lot of reports of antivirus programs marking the file devcppPortable.exe as a virus/trojan/unwanted program have surfaced. I can assure you that the files you download from SourceForge do NOT contain any of that.

To prove my statement, let us check the source code of devcppPortable.exe. It can be found in the Source\Tools\DevCppPortable folder in the source zip files provided here or in the Git repo here.

Over here, devcppPortable builds a string ArgumentsToDev which consists of the -c command that tells devcpp.exe to store its configuration files elsewhere AND the commands that have been passed to devcppPortable. Think of files that are dragged onto devcppPortable.exe in explorer or Auto-Open binds that use devcppPortable. All it does is forward these commands to devcpp.exe

Lastly, devcpp.exe is launched using the provided arguments and using the current directory using the not-so special ShellExecute function.

In other words, this file is harmless. My educated guess as to why this file is marked as an unwanted file is that real unwanted files (especially trojans) exhibit the same behaviour. They also function as hosts that execute external code. Since devcppPortable exhibits the same behaviour, the scanner will think "Hey, this program shows behaviour similar to the other million trojan files in our database. Let's tell the user it is one too to be sure".

What can you do as a user? Please report devcppPortable.exe as a false positive.

Would be nice if you could tag all release posts as "download" or something or a dedicated Download page for the latest (stable) version with a link to the SourceForge page for previous versions. Thanks.

Looks like you are out-of-touch with Sourceforge. This is not your fault. Sourceforge's new policy has been bundling malware automatically with *every* .exe hosted on its website. A recent case was with that of Filezilla. See:

Looks like you are out-of-touch with Sourceforge. This is not your fault. Sourceforge's new policy has been bundling malware automatically with *every* .exe hosted on its website. A recent case was with that of Filezilla

The share your really gives us excitement. Thanks for your sharing. If you feel tired at work or study try to participate in our games to bring the most exciting feeling. Thank you!hotmail sign in | red ball | 192.168.1.1

The blog or and best that is extremely useful to keep I can share the ideas of the future as this is really what I was looking for, I am very comfortable and pleased to come here. Thank you very much.animal jam | five nights at freddy's | hotmail login

Awards

Translators needed

Dev-C++ is looking for translators, because the author doesn't master all thirty languages Dev-C++ is (partially) translated in.

So, if you're willing to translate Dev-C++ into a language or update the existing translation, don't hesitate to open up YourLanguage.lng and start translating/updating, using English.lng as the reference language.